Re: Server hacked - next...?
On Mon, 2003-06-30 at 23:41, Russell Coker wrote:
> On Mon, 30 Jun 2003 16:12, Donovan Baarda wrote:
> > In then end it is nearly always easier to re-install than to just clean
> > the system without it, even if the hacker did leave .bash_histories
> > behind that show everything he/she did.
>
> Besides, just because a script-kiddie got in first does not mean that a
> skilled and experienced person didn't follow them. Or maybe a skilled person
> cracked the machine months or years before the script-kiddie...
I almost added that the .bash_history's could have been forged by a more
skilled cracker to hide something more subtle...
--
----------------------------------------------------------------
Donovan Baarda http://minkirri.apana.org.au/~abo/
----------------------------------------------------------------
Reply to: